Red Hat Security AdvisoryRHSA-2025:15004
krb5 security update
Released 2025-09-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) krb5-1.18.2-26.el8_8.5, krb5-devel-1.18.2-26.el8_8.5, krb5-libs-1.18.2-26.el8_8.5 +5
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) krb5-1.18.2-26.el8_8.5, krb5-devel-1.18.2-26.el8_8.5, krb5-libs-1.18.2-26.el8_8.5 +5
Fixes 1 record
Priority LOW 26
A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00351 · Published 2025-04-15 · Partial fix · 1.22, 1.21.3-8.el10_0 +10 CWE-328
